Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/HL23JkhmDLszmlcMKIQLjOYgOlw.roa
File: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (raw, json)
Hash identifier: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=
Subject key identifier: 1C:BD:B7:26:48:66:0C:BB:33:9A:57:0C:28:84:0B:8C:E6:20:3A:5C
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019427472D617C6F0B0307F507745120C09C
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/HL23JkhmDLszmlcMKIQLjOYgOlw.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13119
IP address blocks: 80.94.16.0/20 maxlen: 20
109.69.88.0/21 maxlen: 24
212.14.48.0/20 maxlen: 24
213.155.160.0/19 maxlen: 19
2001:4c5c::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2d:61:7c:6f:0b:03:07:f5:07:74:51:20:c0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cbdb72648660cbb339a570c28840b8ce6203a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:9b:34:be:c7:cd:f6:59:87:68:89:1a:6a:
cc:98:0a:ad:76:5b:6a:34:7d:dc:82:b8:27:10:6c:
70:f7:f3:91:b4:cf:3f:3e:db:60:95:c2:48:06:2f:
e8:75:fd:c5:1e:51:dc:f9:13:af:a2:79:aa:b3:35:
6f:01:3f:e8:59:d5:3b:aa:1d:73:b0:11:55:55:c9:
80:0e:27:2d:17:d4:83:cd:c4:5e:6c:97:09:cd:db:
df:db:07:11:36:3c:e1:d5:af:45:fb:d6:74:27:80:
ff:a2:ab:dd:92:d7:5a:25:c5:de:32:27:8b:7a:88:
4b:07:fd:6b:59:98:4b:1d:92:d6:7d:ab:7f:c4:ae:
63:7e:70:53:a2:e0:ea:29:7b:c5:60:09:b5:c4:76:
b7:9c:39:09:74:49:ba:24:51:3f:35:61:54:50:cf:
cd:f9:04:25:6e:4b:e7:9f:94:f4:dc:6f:7f:a1:1f:
15:96:e1:0a:c2:d8:95:e5:4d:0f:ae:8e:f9:65:19:
48:fd:af:d0:75:6a:2f:cb:5c:65:95:81:ef:18:95:
06:d7:ac:f3:66:3c:c7:ea:1a:0e:88:38:3b:77:7d:
d1:03:80:5f:0f:ec:3e:11:d4:7b:1d:40:ca:c0:53:
44:53:5d:6a:0b:67:f9:3b:d6:26:1e:23:d7:1f:9a:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BD:B7:26:48:66:0C:BB:33:9A:57:0C:28:84:0B:8C:E6:20:3A:5C
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/HL23JkhmDLszmlcMKIQLjOYgOlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.16.0/20
109.69.88.0/21
212.14.48.0/20
213.155.160.0/19
IPv6:
2001:4c5c::/30
Signature Algorithm: sha256WithRSAEncryption
0f:30:1a:9a:a5:57:4d:a4:12:27:7d:06:4b:c0:30:9d:cc:4a:
8d:4c:70:73:5e:b7:4d:ab:23:15:ef:cc:8d:08:45:f8:40:7a:
ec:ac:75:1c:fd:99:0b:f2:a1:3f:91:db:1a:4f:0a:0c:84:35:
1d:84:04:85:a9:a9:bb:a2:da:c8:ba:e9:46:a7:b7:61:a6:ee:
e0:bf:d8:d2:35:02:65:39:00:6c:7c:8e:81:7a:84:be:65:6a:
16:f8:9d:ca:26:11:0e:62:a4:60:18:8d:b2:47:2f:17:73:0c:
19:0c:da:5e:d7:6a:f0:bb:9d:5d:51:c8:6a:96:82:1c:0f:24:
97:f4:f3:e4:20:27:85:81:5a:b5:00:3f:50:8f:ec:0a:7c:84:
9d:e8:3e:b4:b4:4e:c2:35:cd:54:f2:fc:ef:a8:61:98:c4:e0:
9f:02:82:22:79:59:2a:5e:a8:ad:e2:9a:2c:75:13:5e:fd:d1:
91:7d:06:89:90:55:29:06:e8:6a:35:86:28:e8:c7:37:02:c3:
cd:18:fd:4f:1d:e7:66:17:b6:a3:8a:ce:c7:da:04:26:8f:90:
8f:17:68:3a:21:56:3e:4d:08:09:8c:98:7d:a4:0a:6f:c7:83:
20:be:c2:b6:7b:0e:62:67:4c:e4:46:87:cc:37:eb:5f:95:de:
48:18:ea:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:10 2025 by rpki-client